Search results

Encryption XML 1,1 RSA-OAEP-11 with separate configuration for the MGF and the digest

Status: Open.

#789 In SAML-Toolkits/ruby-saml;

· alextrab1 opened on Apr 30, 2026

CVE-2025-66568 and CVE-2025-66567 affects version ruby-saml <1.18.0 (including 1.12.4)

security

Status: Open.

#783 In SAML-Toolkits/ruby-saml;

· pitbulk opened on Dec 8, 2025

Parser consolidation follow-ups

Status: Open.

#775 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Nov 20, 2025

InResponseTo checking is brittle

Status: Open.

#773 In SAML-Toolkits/ruby-saml;

· bdewater-thatch opened on Sep 24, 2025

IMPORTANT: All users must upgrade to ruby-saml 1.18.0 ASAP

Status: Open.

#753 In SAML-Toolkits/ruby-saml;

· pitbulk opened on Mar 12, 2025

OneLogin::RubySaml::Response is broken on rexml 3.3.9

Status: Open.

#729 In SAML-Toolkits/ruby-saml;

· msxavi opened on Nov 5, 2024

want_assertions_encrypted should add a validation to require IdP encryption

Status: Open.

#714 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 15, 2024

idp_cert_multi should accept an array of PEM strings (and array of X509 objects)

Status: Open.

#713 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 14, 2024

RubySaml 2.0 release -- Final Steps

Status: Open.

#703 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 10, 2024

v3.0 / Future: Proposal to rename some params to clarify SP vs. IdP

Status: Open.

#700 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 9, 2024

v3.0: What to do about single_value_compatibility?

Status: Open.

#698 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 9, 2024

v2.1: Deprecation Checklist

Status: Open.

#693 In SAML-Toolkits/ruby-saml;

· johnnyshields opened on Jul 9, 2024